Description:
In IT Client Manager the caf loadcreds command can be stored in the cafcreds.txt file.
This text file includes the user account and password of the domain active directory account for the AMAGENT and SDAGENT, so these agents can be accessed by network resources.
The process below will explain the caf loadcreds and caf setcreds commands and how to change passwords that are included in the cafcreds.txt when required.
The caf setcreds command sets the credentials for a CA ITCM service.
Currently only the Asset Management and Software Delivery Agents are supported. This command can be used directly on a console or by sending an asset or software delivery job to many machines.
Important Note: Beware that you are embedding plain text passwords when using an asset or software job.
Here are some examples of using the caf setcreds command to set the SDAGENT and AMAGENT Passwords.
Solution:
Maintain two accounts and alternate between the two. If, say, the rule is the password must be changed every 3 months, do the following EVERY month:
With a little work, the above process could be automated.
Using this method, the password can be changed prior to sending the job without fear of users being locked out since the targets will still be using the other user until they get the new credentials. Each user account will be used for a month at a time plus whatever time it takes for the job to run at every target, and sufficient time is allowed for the job to run on targets which may not be active for a week or two due to vacation or whatever.